package com.zb.zeus.auth.service;

import com.zb.zeus.common.core.constant.Constants;
import com.zb.zeus.common.core.constant.UserConstants;
import com.zb.zeus.common.core.domain.R;
import com.zb.zeus.common.core.enums.UserStatus;
import com.zb.zeus.common.core.exception.BaseException;
import com.zb.zeus.common.core.utils.SecurityUtils;
import com.zb.zeus.common.core.utils.StringUtils;
import com.zb.zeus.common.core.web.domain.AjaxResult;
import com.zb.zeus.common.security.context.UserContextHolder;
import com.zb.zeus.system.api.RemoteLogService;
import com.zb.zeus.system.api.RemoteUserService;
import com.zb.zeus.system.api.domain.SysEmployee;
import com.zb.zeus.system.api.model.LoginUser;
import org.springframework.context.EnvironmentAware;
import org.springframework.core.env.Environment;
import org.springframework.stereotype.Component;

import javax.annotation.Resource;
import java.util.Map;
import java.util.Optional;

/**
 * 登录校验方法
 *
 * @author zb.zeus
 */
@Component
public class SysLoginService implements EnvironmentAware {

    private Environment environment;

    @Override
    public void setEnvironment(Environment environment) {
        this.environment = environment;
    }

    @Resource
    private RemoteLogService remoteLogService;

    @Resource
    private RemoteUserService remoteUserService;

    /**
     * 登录
     */
    public LoginUser login(String username) {
        UserContextHolder.getLoginUser().setAdNum(username);
        R<LoginUser> userResult = remoteUserService.getUserInfo(username);
        if (R.FAIL == userResult.getCode()) {
            throw new BaseException(userResult.getMsg());
        }
        if (StringUtils.isNull(userResult) || StringUtils.isNull(userResult.getData())) {
            remoteLogService.saveLogininfor(username, Constants.LOGIN_FAIL, "登录用户不存在");
            throw new BaseException("登录用户：" + username + " 不存在");
        }
        SysEmployee employee = userResult.getData().getEmployee();
        if (UserStatus.DISABLE.getCode().equals(employee.getStatus())) {
            remoteLogService.saveLogininfor(username, Constants.LOGIN_FAIL, "用户已停用，请联系管理员");
            throw new BaseException("对不起，您的账号：" + username + " 已停用");
        }
        LoginUser userInfo = userResult.getData();
        remoteLogService.saveLogininfor(username, Constants.LOGIN_SUCCESS, "登录成功");
        return userInfo;
    }

    /**
     * 登录
     */
    public LoginUser login(String username, String password) {
        UserContextHolder.getLoginUser().setAdNum(username);
        // 用户名或密码为空 错误
        if (StringUtils.isAnyBlank(username, password)) {
            remoteLogService.saveLogininfor(username, Constants.LOGIN_FAIL, "用户/密码必须填写");
            throw new BaseException("用户/密码必须填写");
        }
        // 密码如果不在指定范围内 错误
        if (password.length() < UserConstants.PASSWORD_MIN_LENGTH
                || password.length() > UserConstants.PASSWORD_MAX_LENGTH) {
            remoteLogService.saveLogininfor(username, Constants.LOGIN_FAIL, "用户密码不在指定范围");
            throw new BaseException("用户密码不在指定范围");
        }
        // 用户名不在指定范围内 错误
        if (username.length() < UserConstants.USERNAME_MIN_LENGTH
                || username.length() > UserConstants.USERNAME_MAX_LENGTH) {
            remoteLogService.saveLogininfor(username, Constants.LOGIN_FAIL, "用户名不在指定范围");
            throw new BaseException("用户名不在指定范围");
        }
        String activeProfile = environment.getActiveProfiles()[0];
        // Ladp鉴权用户
        int loginCode = StringUtils.equals(activeProfile, "prod") ? LadpService.login(username, password) : 200;

        R<LoginUser> userResult = null;
        if (loginCode != 200) {
            // ad登录失败后走内部登录
            userResult = remoteUserService.getOuterUserInfo(username);
            String userPassword = Optional.ofNullable(userResult.getData()).map(LoginUser::getEmployee)
                    .map(SysEmployee::getPassword).filter(StringUtils::isNotEmpty).orElseThrow(() -> new BaseException("用户名或密码错误"));
            if (!SecurityUtils.matchesPassword(password, userPassword)) {
                remoteLogService.saveLogininfor(username, Constants.LOGIN_FAIL, "用户名或密码错误");
                throw new BaseException("用户名或密码错误");
            }
        }

        // 查询用户信息
        if (userResult == null) {
            userResult = remoteUserService.getUserInfo(username);
        }

        if (R.FAIL == userResult.getCode()) {
            throw new BaseException(userResult.getMsg());
        }

        if (StringUtils.isNull(userResult) || StringUtils.isNull(userResult.getData())) {
            remoteLogService.saveLogininfor(username, Constants.LOGIN_FAIL, "登录用户不存在");
            throw new BaseException("登录用户：" + username + " 不存在");
        }
        //LoginUser userInfo = userResult.getData();
        SysEmployee employee = userResult.getData().getEmployee();
        //if (UserStatus.DELETED.getCode().equals(user.getDelFlag())) {
        //    remoteLogService.saveLogininfor(username, Constants.LOGIN_FAIL, "对不起，您的账号已被删除");
        //
        //    throw new BaseException("对不起，您的账号：" + username + " 已被删除");
        //}
        if (UserStatus.DISABLE.getCode().equals(employee.getStatus())) {
            remoteLogService.saveLogininfor(username, Constants.LOGIN_FAIL, "用户已停用，请联系管理员");
            throw new BaseException("对不起，您的账号：" + username + " 已停用");
        }
        //if (!SecurityUtils.matchesPassword(password, user.getPassword())) {
        //    remoteLogService.saveLogininfor(username, Constants.LOGIN_FAIL, "用户密码错误");
        //    throw new BaseException("用户不存在/密码错误");
        //}
        LoginUser userInfo = userResult.getData();
        remoteLogService.saveLogininfor(username, Constants.LOGIN_SUCCESS, "登录成功");
        return userInfo;
    }

    public void logout(String loginName) {
        remoteLogService.saveLogininfor(loginName, Constants.LOGOUT, "退出成功");
    }

    public Map<String, Object> createToken(LoginUser loginUser) {
        AjaxResult ret = remoteUserService.createToken(loginUser);
        return (Map<String, Object>) ret.get(AjaxResult.DATA_TAG);
    }

    public void delToken(String token) {
        remoteUserService.delToken(token);
    }

    public void refreshToken(LoginUser loginUser) {
        remoteUserService.refreshToken(loginUser);
    }
}